Gentoo Archives: gentoo-dev

From: "Robin H. Johnson" <robbat2@g.o>
To: gentoo-dev@l.g.o
Subject: [gentoo-dev] Tree-signing GLEPs update
Date: Sun, 31 Jan 2010 09:42:09
I'm putting the remaining tree-signing GLEPs up here on the lists again,
now that I've integrated the requested changes to them. I hoped to get
them out before now, but I've had a lot going on as usual.

Thanks to the following for their questions:
- ulm
- Calchan
- solar

Hopefully I haven't left any bits out.

Further questions are strongly encouraged at this point, because there
is even less chance I'm going to be present at the next council meeting,
as I'll be in Brussels at the time.

Changes I've made will be summarized in each GLEP mail in this thread.

The prototype code remains at the same place in CVS:
- generates a top-level MetaManifest only, not
  yet updated for subdirectory Manifests. (I just split the MetaManifest
  with some bad Perl for size estimations).
- gnupg-verify/ speed-daemon ways to verify many signed files. Once you
  dodge the bad gpgme design of one exec per verify, you're basically
  limited only by seek time for handling 10k files.

Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail     : robbat2@g.o
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85


Subject Author
[gentoo-dev] GLEP58 - MetaManifest "Robin H. Johnson" <robbat2@g.o>
[gentoo-dev] GLEP59 - Manifest2 hashes "Robin H. Johnson" <robbat2@g.o>
[gentoo-dev] GLEP60 - Manifest2 filetypes "Robin H. Johnson" <robbat2@g.o>
[gentoo-dev] GLEP61 - Manifest2 compression "Robin H. Johnson" <robbat2@g.o>
[gentoo-dev] Tree-signing GLEPS review notes "Robin H. Johnson" <robbat2@g.o>